The management of Datacruit s.r.o., whose main activity is the provision and development of software for managing employee recruitment, is committed to further development of the organization, continuous improvement of the level of service quality to comprehensively satisfy the expected and anticipated needs of customers and meet the requirements of legal regulations.

This policy aims to inform the company's customers and partners and the public about the ongoing interest in protecting all information assets and assets used for their processing against external and internal threats, their misuse, disclosure or destruction.

The basic purpose of the information security system is to ensure the continuous integrity, availability and confidentiality of data and other assets. The company's management is aware of its responsibility for continuously increasing the security of its own assets and the assets of our clients and other partners and products provided to the company's existing and new customers with the aim of maximally satisfying the needs of its customers. Therefore, it decided to implement a documented information security management system according to the model of the process-oriented system ČSN EN ISO/IEC 27001:2023.

As part of the ISMS improvement process, the company's management will pay constant attention to the following areas:

• Ensure compliance of our ISMS with the business requirements of our customers and partners as well as with laws, decrees and all relevant regulations. Avoid violations of any legal, statutory, regulatory or contractual obligations and any security requirements. In particular, comply with the principles based on the General Data Protection Regulation GDPR.
• Manage the development of information security within the company and at the interfaces with our customers and partners.
• Achieve, maintain and improve adequate protection of the company's assets and our customers and partners. Therefore, the situation is examined and evaluated in terms of risks (see security risk analysis), where the management decides on the division into acceptable and unacceptable and subsequently introduces measures for them.
• Permanently ensure that security and compatibility are integral parts of our information products.
   

In Prague, March 10, 2025

Zdeněk Bajer